DevSecOps Engineer (Active Secret Clearance) - REMOTE - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer (Active Secret Clearance) will be responsible for integrating security practices into the DevOps pipeline, promoting an organization-wide security mindset, and ensuring the security of applications throughout their lifecycle. This role requires collaboration across development, operations, and security teams, leveraging automation and continuous integration/continuous deployment (CI/CD) workflows to enhance security posture. The successful candidate will possess an Active Secret Clearance and will effectively contribute to the successful implementation of security measures in software development and deployment processes.

Job Responsibilities

• Design and implement security controls in the CI/CD pipeline.
• Collaborate with development and operations teams to ensure security best practices are followed.
• Conduct security assessments and vulnerability analyses of applications and infrastructure.
• Implement monitoring solutions to detect and respond to security incidents.
• Automate security testing, inspection, and monitoring processes within the pipeline.
• Develop and maintain policies and procedures related to security and compliance.
• Participate in incident response and post-incident analysis.
• Stay updated with the latest security trends, threats, and vulnerabilities.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• At least 3 years of experience in a DevSecOps or DevOps role.
• Proven experience with security tools and practices such as static and dynamic application security testing (SAST/DAST).
• Strong understanding of cloud security principles and technologies (e.g., AWS, Azure).
• Familiarity with regulatory compliance frameworks and standards (e.g., NIST, ISO 27001).
• Active Secret Security Clearance.
• Excellent problem-solving skills and attention to detail.
• Effective communication and collaboration skills to work in diverse teams.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools, including cloud computing platforms such as AWS and Azure, containerization tools like Docker and Kubernetes, security testing tools (e.g., SonarQube, OWASP ZAP), continuous integration/continuous deployment tools (e.g., Jenkins, GitLab CI/CD), and various scripting languages for automation (e.g., Python, Bash). Familiarity with security compliance tools and threat modeling frameworks will also be essential for this role.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position possess a strong technical background combined with a solid understanding of security principles. They are proactive in identifying security vulnerabilities, and adept at implementing effective solutions. Successful candidates are also team players, demonstrating excellent communication and collaboration skills to work across multiple teams. A continuous learning mindset to keep up with new security threats and technologies is vital, alongside a commitment to fostering a culture of security within the organization.